ELSA-2024-4312

ELSA-2024-4312 - openssh security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2024-07-04

Description


[8.7p1-38.0.2.1]
- Update upstream references [Orabug: 36564626]

[8.7p1-38.1]
- Possible remote code execution due to a race condition (CVE-2024-6387)
Resolves: RHEL-45347


Related CVEs


CVE-2024-6387

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) openssh-8.7p1-38.0.2.el9_4.1.src.rpm45404963e774254ac73a33cabd08a8d215b426cb01b4073690daa506e2959c80-ol9_aarch64_appstream
openssh-8.7p1-38.0.2.el9_4.1.src.rpm45404963e774254ac73a33cabd08a8d215b426cb01b4073690daa506e2959c80-ol9_aarch64_baseos_latest
openssh-8.7p1-38.0.2.el9_4.1.src.rpm45404963e774254ac73a33cabd08a8d215b426cb01b4073690daa506e2959c80-ol9_aarch64_u4_baseos_patch
openssh-8.7p1-38.0.2.el9_4.1.aarch64.rpm2b02d655bd8d671a9ac1b75d5c5958dc10c5657457659c81a0a236d4ee49fb06-ol9_aarch64_baseos_latest
openssh-8.7p1-38.0.2.el9_4.1.aarch64.rpm2b02d655bd8d671a9ac1b75d5c5958dc10c5657457659c81a0a236d4ee49fb06-ol9_aarch64_u4_baseos_patch
openssh-askpass-8.7p1-38.0.2.el9_4.1.aarch64.rpme8b3c3b6b734b621066febf2477c89e5056cd22c699b2043b9c824f93c03c2e5-ol9_aarch64_appstream
openssh-clients-8.7p1-38.0.2.el9_4.1.aarch64.rpm28370921049b507fa6d43101b7b7c05486f1ecb61a3c8f3cf7331ec2547ae66c-ol9_aarch64_baseos_latest
openssh-clients-8.7p1-38.0.2.el9_4.1.aarch64.rpm28370921049b507fa6d43101b7b7c05486f1ecb61a3c8f3cf7331ec2547ae66c-ol9_aarch64_u4_baseos_patch
openssh-keycat-8.7p1-38.0.2.el9_4.1.aarch64.rpm2ba5d4e62e05809abf089d268ae4c0be05746d9b9420432482137584942bbeeb-ol9_aarch64_baseos_latest
openssh-keycat-8.7p1-38.0.2.el9_4.1.aarch64.rpm2ba5d4e62e05809abf089d268ae4c0be05746d9b9420432482137584942bbeeb-ol9_aarch64_u4_baseos_patch
openssh-server-8.7p1-38.0.2.el9_4.1.aarch64.rpm05a3b535a58ad8c1202dd4dd1fba4a27776e2d2fb19687064d2cfd2eb6d0d6e3-ol9_aarch64_baseos_latest
openssh-server-8.7p1-38.0.2.el9_4.1.aarch64.rpm05a3b535a58ad8c1202dd4dd1fba4a27776e2d2fb19687064d2cfd2eb6d0d6e3-ol9_aarch64_u4_baseos_patch
pam_ssh_agent_auth-0.10.4-5.38.0.2.el9_4.1.aarch64.rpmc772913f9e84ef69c92a294115782cad522a1cf539fcdd5ca5620b42cb046fe9-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) openssh-8.7p1-38.0.2.el9_4.1.src.rpm45404963e774254ac73a33cabd08a8d215b426cb01b4073690daa506e2959c80-ol9_x86_64_appstream
openssh-8.7p1-38.0.2.el9_4.1.src.rpm45404963e774254ac73a33cabd08a8d215b426cb01b4073690daa506e2959c80-ol9_x86_64_baseos_latest
openssh-8.7p1-38.0.2.el9_4.1.src.rpm45404963e774254ac73a33cabd08a8d215b426cb01b4073690daa506e2959c80-ol9_x86_64_u4_baseos_patch
openssh-8.7p1-38.0.2.el9_4.1.x86_64.rpmdf507d14c673bc95e4bc4cc137f070523b1217e04882a3edaf5adc0dd9c73e2b-ol9_x86_64_baseos_latest
openssh-8.7p1-38.0.2.el9_4.1.x86_64.rpmdf507d14c673bc95e4bc4cc137f070523b1217e04882a3edaf5adc0dd9c73e2b-ol9_x86_64_u4_baseos_patch
openssh-askpass-8.7p1-38.0.2.el9_4.1.x86_64.rpm25bae433b28c92b78616a449d4a39bd92efc6521c14fdf25abc332d6e3e00a6f-ol9_x86_64_appstream
openssh-clients-8.7p1-38.0.2.el9_4.1.x86_64.rpme10f19212dd245720979f37676445ab8216ab5d435a5246d6396d463490d53dd-ol9_x86_64_baseos_latest
openssh-clients-8.7p1-38.0.2.el9_4.1.x86_64.rpme10f19212dd245720979f37676445ab8216ab5d435a5246d6396d463490d53dd-ol9_x86_64_u4_baseos_patch
openssh-keycat-8.7p1-38.0.2.el9_4.1.x86_64.rpm51ee8bfc29a87e7778026d6d803bbc8295ad5f370b9c485f32fddc6d1f508086-ol9_x86_64_baseos_latest
openssh-keycat-8.7p1-38.0.2.el9_4.1.x86_64.rpm51ee8bfc29a87e7778026d6d803bbc8295ad5f370b9c485f32fddc6d1f508086-ol9_x86_64_u4_baseos_patch
openssh-server-8.7p1-38.0.2.el9_4.1.x86_64.rpm1b75fdbc86e674535f0e37708c002fe09d205cb6bd923fda1b418f86022ac5a9-ol9_x86_64_baseos_latest
openssh-server-8.7p1-38.0.2.el9_4.1.x86_64.rpm1b75fdbc86e674535f0e37708c002fe09d205cb6bd923fda1b418f86022ac5a9-ol9_x86_64_u4_baseos_patch
pam_ssh_agent_auth-0.10.4-5.38.0.2.el9_4.1.x86_64.rpm45e6bd5eb28a6b08ccdd62afd0c0d75ffe37958c4bca718814ec64e6c8137e84-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete